feat(postgres): modify the docker base image as postgres:11-alpine

Author: duanhongyi

Dockerfile

@@ -1,47 +1,39 @@
-FROM postgres:11
-
-ARG DEBIAN_FRONTEND=noninteractive
-ARG BUILD_DEPS='gcc git libffi-dev libssl-dev python3-dev python3-pip python3-wheel'
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-        $BUILD_DEPS \
-        gosu \
-        lzop \
-        libpq-dev \
-        pv \
-        python3 \
-        util-linux \
-        # swift package needs pkg_resources and setuptools
-        python3-pkg-resources \
-        python3-setuptools \
-        python3-pip && \
-    ln -sf /usr/bin/python3 /usr/bin/python && \
-    ln -sf /usr/bin/pip3 /usr/bin/pip
-
-# setuptools from ubuntu archives is too old for googleapis-common-protos
-RUN pip install --upgrade setuptools && \
-    pip install --disable-pip-version-check --no-cache-dir \
-        envdir==1.0.1 \
-        wal-e[aws,azure,google,swift]==1.1.0 \
-        gcloud==0.18.3 \
-        oauth2client==4.1.3 \
-        azure-storage==0.20.0
-
-# cleanup
-RUN apt-get purge -y --auto-remove $BUILD_DEPS && \
-    apt-get autoremove -y && \
-    apt-get clean -y
+FROM postgres:11-alpine
+
+ENV WALE_LOG_DESTINATION stderr
+ENV WALE_ENVDIR /etc/wal-e.d/env
+
+RUN mkdir -p $WALE_ENVDIR \
+    && echo 'http://dl-cdn.alpinelinux.org/alpine/v3.5/main' >> /etc/apk/repositories \
+    && apk add --update --virtual .build-deps \
+           git \
+           build-base \
+           libffi-dev \
+           openssl-dev \
+           python3-dev=3.5.6-r0 \
+           linux-headers \
+    && apk add \
+           lzo \
+           pv \
+           util-linux \
+           python3=3.5.6-r0 \
+    && pip3 install --upgrade pip setuptools \
+    && pip install  --disable-pip-version-check --no-cache-dir \
+           psycopg2-binary==2.7.6.1 \
+           envdir==1.0.1 \
+           wal-e[aws,azure,google,swift]==1.1.0 \
+           gcloud==0.18.3 \
+           oauth2client==4.1.3 \
+           azure-storage==0.20.0 \
+    && apk del .build-deps \
+    && rm -rf /var/cache/apk/*
 
 COPY rootfs /
-ENV WALE_ENVDIR=/etc/wal-e.d/env
-RUN mkdir -p $WALE_ENVDIR
 
 ARG PATCH_CMD="python3 /patcher-script.py"
 RUN $PATCH_CMD file /bin/create_bucket /patcher-script.d/patch_boto_s3.py
-RUN $PATCH_CMD file /usr/local/bin/wal-e /patcher-script.d/patch_boto_s3.py
+RUN $PATCH_CMD module wal_e.cmd /patcher-script.d/patch_boto_s3.py
 RUN $PATCH_CMD module wal_e.worker.worker_util /patcher-script.d/patch_wal_e_s3.py
 
-
 CMD ["/docker-entrypoint.sh", "postgres"]
 EXPOSE 5432

charts/database/templates/database-deployment.yaml

@@ -45,7 +45,7 @@ spec:
             preStop:
               exec:
                 command:
-                  - gosu
+                  - su-exec
                   - postgres
                   - do_backup
           readinessProbe:

rootfs/bin/create_bucket

@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/env python3
 
 import os
 

rootfs/bin/is_running

@@ -8,4 +8,4 @@ if [[ -f "$PGDATA/recovery.conf" ]]; then
   exit 1
 fi
 
-gosu postgres pg_ctl status
+su-exec postgres pg_ctl status

rootfs/docker-entrypoint-initdb.d/003_restore_from_backup.sh

@@ -13,13 +13,13 @@ chmod 0700 "$PGDATA"
 
 # reboot the server for wal_level to be set before backing up
 echo "Rebooting postgres to enable archive mode"
-gosu postgres pg_ctl -D "$PGDATA" -w restart
+su-exec postgres pg_ctl -D "$PGDATA" -w restart
 
 # check if there are any backups -- if so, let's restore
 # we could probably do better than just testing number of lines -- one line is just a heading, meaning no backups
 if [[ $(envdir "$WALE_ENVDIR" wal-e --terse backup-list | wc -l) -gt "1" ]]; then
   echo "Found backups. Restoring from backup..."
-  gosu postgres pg_ctl -D "$PGDATA" -w stop
+  su-exec postgres pg_ctl -D "$PGDATA" -w stop
   rm -rf "$PGDATA/*"
   envdir "$WALE_ENVDIR" wal-e backup-fetch "$PGDATA" LATEST
   cat << EOF > "$PGDATA/postgresql.conf"
@@ -50,7 +50,7 @@ EOF
   echo "restore_command = 'envdir /etc/wal-e.d/env wal-e wal-fetch \"%f\" \"%p\"'" >> "$PGDATA/recovery.conf"
   chown -R postgres:postgres "$PGDATA"
   chmod 0700 "$PGDATA"
-  gosu postgres pg_ctl -D "$PGDATA" \
+  su-exec postgres pg_ctl -D "$PGDATA" \
       -o "-c listen_addresses=''" \
       -w start
 
@@ -62,7 +62,7 @@ EOF
 fi
 
 echo "Performing an initial backup..."
-gosu postgres envdir "$WALE_ENVDIR" wal-e backup-push "$PGDATA"
+su-exec postgres envdir "$WALE_ENVDIR" wal-e backup-push "$PGDATA"
 
 # ensure $PGDATA has the right permissions
 chown -R postgres:postgres "$PGDATA"

rootfs/docker-entrypoint-initdb.d/004_run_backups.sh

@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 
 # Run periodic backups in the background
-gosu postgres backup &
+su-exec postgres backup &

rootfs/docker-entrypoint.sh

@@ -23,7 +23,7 @@ if [ "$1" = 'postgres' ]; then
 
 	# look specifically for PG_VERSION, as it is expected in the DB dir
 	if [ ! -s "$PGDATA/PG_VERSION" ]; then
-		gosu postgres initdb
+		su-exec postgres initdb
 
 		# check password first so we can output the warning before postgres
 		# messes it up
@@ -54,7 +54,7 @@ if [ "$1" = 'postgres' ]; then
 
 		# internal start of server in order to allow set-up using psql-client
 		# does not listen on TCP/IP and waits until start finishes
-		gosu postgres pg_ctl -D "$PGDATA" \
+		su-exec postgres pg_ctl -D "$PGDATA" \
 			-o "-c listen_addresses=''" \
 			-w start
 
@@ -94,15 +94,15 @@ if [ "$1" = 'postgres' ]; then
 			echo
 		done
 
-		gosu postgres pg_ctl -D "$PGDATA" -m fast -w stop
+		su-exec postgres pg_ctl -D "$PGDATA" -m fast -w stop
 		set_listen_addresses '*'
 
 		echo
 		echo 'PostgreSQL init process complete; ready for start up.'
 		echo
 	fi
 
-	exec gosu postgres "$@"
+	exec su-exec postgres "$@"
 fi
 
 exec "$@"